curl/backport-CVE-2023-27538.patch
xingwei 8075798eea fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
(cherry picked from commit 93c634a471864905d124ae364e2356679ee6410d)
2023-03-24 11:22:05 +08:00

25 lines
753 B
Diff

From af369db4d3833272b8ed443f7fcc2e757a0872eb Mon Sep 17 00:00:00 2001
From: Daniel Stenberg <daniel@haxx.se>
Date: Fri, 10 Mar 2023 08:22:51 +0100
Subject: [PATCH] url: fix the SSH connection reuse check
Reported-by: Harry Sintonen
Closes #10735
---
lib/url.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
Index: curl/lib/url.c
===================================================================
--- curl.orig/lib/url.c
+++ curl/lib/url.c
@@ -1299,7 +1299,7 @@ ConnectionExists(struct Curl_easy *data,
}
}
- if(get_protocol_family(needle->handler) == PROTO_FAMILY_SSH) {
+ if(get_protocol_family(needle->handler) & PROTO_FAMILY_SSH) {
if(!ssh_config_matches(needle, check))
continue;
}